5 ms·
What libpcap offers is portability--you can run pretty much the same packet capturing tool on Windows, Linux, macOS, *BSD, and etc. If you have one specific pla
by oshiar53-0 5y ago
What libpcap offers is portability--you can run pretty much the same packet capturing tool on Windows, Linux, macOS, *BSD, and etc. If you have one specific platform, just use raw sockets/eBPF/io_uring/whatever you'd like.
- mgaunard 5y agoMost of the use of libpcap is with files. If you need to capture live data, most likely it's not a good fit. Reliable high throughput requires a special software architecture, that the format isn't even particularly suited for.